Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: 8pe0bKQi+OXvMQ2Djo61yaLFOxDMu0/yJaKiGDJ3QZg=
Subject key identifier: 15:88:E4:F6:64:B6:D6:DF:3C:67:DC:E9:30:DD:C4:39:E4:46:7A:41
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 0197D217C616E7EFBF69D010543B0D74BC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 14C2
Signing time: Thu 03 Jul 2025 21:01:02 +0000
Manifest this update: Thu 03 Jul 2025 21:01:02 +0000
Manifest next update: Fri 04 Jul 2025 21:01:02 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: x8tqUVB2hVsVKnIVKrYV8tExdlPppcS6KTYlgrnvYnw=)
2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:17:c6:16:e7:ef:bf:69:d0:10:54:3b:0d:74:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Jul 3 21:01:02 2025 GMT
Not After : Jul 4 21:01:02 2025 GMT
Subject: CN=1588e4f664b6d6df3c67dce930ddc439e4467a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:d9:f4:f9:84:dd:12:d6:06:e1:4c:22:83:
74:a4:0e:d3:55:e6:4d:da:db:1e:6b:ca:89:d3:8f:
66:00:b1:5b:68:31:86:39:2c:c9:c2:8e:5e:93:43:
c2:9d:8c:ac:0e:0d:a8:c0:78:a8:70:59:f3:4c:01:
46:2e:66:88:1e:43:20:52:c4:25:a7:d3:94:3d:f5:
ce:04:2a:8b:b4:69:48:d7:28:72:13:96:29:9c:05:
b5:6c:e3:3d:7c:77:8e:bc:d2:7a:db:46:3d:fe:2d:
0f:6b:ab:28:d6:47:4f:0d:20:81:e9:4a:02:92:7a:
c6:88:44:32:73:f3:70:bf:cd:b4:6c:4a:5a:3d:84:
76:ba:68:0e:57:93:36:5d:3e:f5:fc:0a:0d:17:4e:
ac:3b:4a:3a:a7:8f:ad:47:3a:79:c7:64:49:af:28:
da:53:36:72:bf:2b:21:40:cb:85:53:3d:d5:a8:c6:
e9:d0:a4:e0:cc:3c:24:fc:ec:88:02:14:bd:6e:ca:
77:ea:02:18:62:98:a6:1b:3b:a3:f7:ab:10:43:98:
59:c8:a8:7a:03:6c:52:d1:b2:e5:ab:c8:a8:e7:42:
0c:bb:a0:fa:5b:e2:dd:31:d5:17:1f:e9:30:b0:99:
40:4c:8c:31:47:27:4e:c8:90:05:ea:70:7d:e7:86:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:E4:F6:64:B6:D6:DF:3C:67:DC:E9:30:DD:C4:39:E4:46:7A:41
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:38:82:8a:9a:66:c8:69:2b:17:93:17:2f:5b:fe:b5:46:e5:
d5:6f:2b:8e:6c:b3:a0:22:96:6c:19:3c:5c:42:34:ec:c0:f5:
c4:fd:18:2e:55:80:a7:b8:a2:73:26:4e:75:55:73:c1:b5:10:
fd:f2:cb:d6:ab:8f:9c:59:6a:57:90:e4:4d:cc:ca:40:86:72:
a8:4a:d3:57:3b:be:d6:5f:5c:fd:82:05:f7:fc:3d:07:28:8b:
e4:fc:0e:bb:bf:34:8b:5c:96:a5:95:17:a1:27:61:44:a5:e3:
62:a9:65:83:f5:d7:36:f1:b7:09:6d:d3:f2:30:c3:bd:f1:9b:
ad:b1:e9:98:a1:1d:c6:39:3a:cf:a4:9a:e9:de:67:b6:14:1a:
b9:ed:87:bf:73:61:17:79:96:1b:f7:cf:b9:2a:d7:3e:f8:97:
80:88:e9:b3:00:e2:1f:15:2d:f8:f6:ae:3c:63:6d:12:38:06:
ba:70:2e:f6:01:af:ff:64:9d:d4:49:53:38:d7:4a:23:40:2a:
13:bd:9c:2f:99:bb:76:37:9d:41:a1:d5:a8:1a:a2:5d:ca:92:
e0:e3:5f:5a:73:ff:77:de:34:fc:60:12:13:1b:01:bc:fc:9f:
1a:93:ed:5e:9b:2f:6b:2a:ca:37:64:36:7f:a0:7c:1b:db:ea:
3e:47:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:18:02 2025 by rpki-client